This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json) Hash identifier: 7gtgjOUYbtutWlwAbZReT0O1xxuvzhqblxs3TK2R5Vg= Subject key identifier: 28:DE:2A:D1:FD:E4:BA:40:ED:66:A7:A6:32:C0:8B:35:B1:BD:C1:67 Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a Certificate serial: 019C42B43AA48B2FA2DCE1A33774A421A4E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 14:00:33 +0000 Manifest this update: Mon 09 Feb 2026 14:00:33 +0000 Manifest next update: Tue 10 Feb 2026 14:00:33 +0000 Files and hashes: 1: 4rWRMTAx37_lQCzr5hcZsju6dqw.roa (hash: W2xQvjb4BYluc6hJ83tM86YR+fMCZk+Sc0Dq669prBQ=) 2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: L/voYi4Pygkix4CIQi0+PuMaceXp30TFXoz9/wnIzLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3a:a4:8b:2f:a2:dc:e1:a3:37:74:a4:21:a4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a Validity Not Before: Feb 9 14:00:33 2026 GMT Not After : Feb 10 14:00:33 2026 GMT Subject: CN=28de2ad1fde4ba40ed66a7a632c08b35b1bdc167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2a:d9:f7:4e:a0:05:b2:f2:03:9b:9b:43:c6: b9:c0:e5:bd:a7:39:9a:cf:68:14:34:83:3c:15:4e: 40:df:b2:93:36:70:4a:11:19:d6:7e:cb:b5:e2:14: fb:8f:13:6f:c0:5f:c1:3e:27:fb:7b:ca:bc:1a:68: be:f3:c4:91:a8:b9:80:a5:ff:87:f3:1b:1a:01:32: 86:7e:29:e7:14:49:63:83:81:ab:a1:d6:90:24:e1: b0:14:df:93:d8:61:74:9a:42:34:88:74:3f:8c:29: 57:e2:93:e1:76:09:36:c5:13:09:76:0e:40:5c:cb: cd:a7:c5:4f:d4:cc:cb:4d:32:44:df:3e:5d:b7:46: a2:c6:95:4b:fc:74:d4:96:ca:cb:65:32:fd:20:c9: d3:61:c8:5d:90:b0:d9:ba:8b:b8:d0:01:aa:1e:57: c2:e8:49:8f:5e:6a:7d:ff:01:f0:bb:4b:1c:9d:4c: 3d:a2:a8:f2:c1:13:cc:09:e1:bc:90:d2:a2:1b:82: fc:65:de:a8:cb:d7:fa:45:8b:c2:9a:bf:8d:e0:b3: 3f:e3:73:97:3d:a0:aa:ed:21:01:46:10:47:fc:73: a2:60:60:9b:06:c0:1c:8f:b8:65:40:1a:af:fa:79: fd:99:be:3d:1f:e0:42:4b:07:56:62:4f:7f:6f:b4: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DE:2A:D1:FD:E4:BA:40:ED:66:A7:A6:32:C0:8B:35:B1:BD:C1:67 X509v3 Authority Key Identifier: keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:28:2c:8d:92:1d:98:0d:3a:9a:1e:a4:b7:8d:8e:9a:1d:db: f8:6a:27:1d:a1:bb:66:2f:73:b7:08:16:45:c9:02:ec:32:b1: e8:dc:27:76:fd:70:00:5e:dd:f6:e6:4a:6c:b3:5e:29:cb:d9: 64:1d:45:b2:5f:37:96:2d:b9:9a:60:25:5e:70:b4:3a:f8:6a: 3f:f2:47:4b:5a:1f:ba:f1:b4:6c:54:86:55:1f:a2:75:50:22: 39:8b:9d:c8:d6:f1:31:d9:3d:d0:fd:0d:bc:3d:2a:c7:98:aa: ee:3c:7f:7e:56:74:66:0e:a0:f4:bc:01:53:e1:b8:9f:d0:38: c5:56:28:ce:a5:36:f4:5f:61:47:e2:9d:6a:3b:92:1e:12:4e: 38:f2:e4:df:d8:e5:39:e9:3a:79:fb:7b:2e:3b:8d:8d:32:61: 7c:01:d4:70:f5:11:13:5d:a8:29:6e:97:6c:99:80:59:01:98: 2a:e8:5f:f6:ad:84:43:3b:11:9c:1d:16:a1:41:14:b7:b5:e9: d9:cc:ca:6b:57:e1:3e:b3:e6:c4:d3:6a:87:d9:0c:50:6e:95: 3f:37:b7:00:67:de:72:a7:9a:43:3e:37:a9:1f:04:52:22:f6: a6:84:b5:89:89:ea:15:d8:a4:c3:d5:2f:4c:e0:e2:b2:e7:53: fb:f3:94:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDqkiy+i3OGjN3SkIaTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZmNjN2UwMTdjMmM5Zjc2MzJkYTcyOTM0NzZiYjdlNGEz MDM2NWEwHhcNMjYwMjA5MTQwMDMzWhcNMjYwMjEwMTQwMDMzWjAzMTEwLwYDVQQD EygyOGRlMmFkMWZkZTRiYTQwZWQ2NmE3YTYzMmMwOGIzNWIxYmRjMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8irZ906gBbLyA5ubQ8a5wOW9pzma z2gUNIM8FU5A37KTNnBKERnWfsu14hT7jxNvwF/BPif7e8q8Gmi+88SRqLmApf+H 8xsaATKGfinnFEljg4GrodaQJOGwFN+T2GF0mkI0iHQ/jClX4pPhdgk2xRMJdg5A XMvNp8VP1MzLTTJE3z5dt0aixpVL/HTUlsrLZTL9IMnTYchdkLDZuou40AGqHlfC 6EmPXmp9/wHwu0scnUw9oqjywRPMCeG8kNKiG4L8Zd6oy9f6RYvCmr+N4LM/43OX PaCq7SEBRhBH/HOiYGCbBsAcj7hlQBqv+nn9mb49H+BCSwdWYk9/b7RvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjeKtH95LpA7WanpjLAizWxvcFnMB8GA1UdIwQY MBaAFEz8x+AXwsn3Yy2nKTR2u35KMDZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2Mt M2FkZjliNjEzNDdkLzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2MtM2FkZjliNjEzNDdk LzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSgsjZId mA06mh6kt42Omh3b+GonHaG7Zi9ztwgWRckC7DKx6Nwndv1wAF7d9uZKbLNeKcvZ ZB1Fsl83li25mmAlXnC0OvhqP/JHS1ofuvG0bFSGVR+idVAiOYudyNbxMdk90P0N vD0qx5iq7jx/flZ0Zg6g9LwBU+G4n9A4xVYozqU29F9hR+KdajuSHhJOOPLk39jl Oek6eft7LjuNjTJhfAHUcPURE12oKW6XbJmAWQGYKuhf9q2EQzsRnB0WoUEUt7Xp 2czKa1fhPrPmxNNqh9kMUG6VPze3AGfecqeaQz43qR8EUiL2poS1iYnqFdikw9Uv TODisudT+/OU0A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:27 2026 by rpki-client